firewall-wizards Digest, Vol 38, Issue 7

Send firewall-wizards mailing list submissions to
firewall-wizards@listserv.icsalabs.com

To subscribe or unsubscribe via the World Wide Web, visit
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
or, via email, send a message with subject or body 'help' to
firewall-wizards-request@listserv.icsalabs.com

You can reach the person managing the list at
firewall-wizards-owner@listserv.icsalabs.com

When replying, please edit your Subject line so it is more specific
than "Re: Contents of firewall-wizards digest..."

Today's Topics:

1. Fwd: Workshop on the Analysis of System Logs (WASL) 2009
(Anton Chuvakin)

----------------------------------------------------------------------

Message: 1
Date: Tue, 16 Jun 2009 13:52:40 -0700
From: Anton Chuvakin <anton@chuvakin.org>
Subject: [fw-wiz] Fwd: Workshop on the Analysis of System Logs (WASL)
2009
To: Firewall Wizards Security Mailing List
<firewall-wizards@listserv.icsalabs.com>
Message-ID:
<b2591e2e0906161352w23e0d6f1wdd4aec1a1673d988@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1

Self-explanatory and of definite interest to this list.

Anton

---------- Forwarded message ----------
From: Greg Bronevetsky <greg@bronevetsky.com>
Date: Tue, Jun 16, 2009 at 8:43 AM
Subject: Workshop on the Analysis of System Logs (WASL) 2009

? ? ? Workshop on the Analysis of System Logs (WASL) 2009
? ? ? http://www.systemloganalysis.com Call for Papers

? ? ? ? ? ? ? ?===============================
? ? ? ? ? ? ? ? ? ? ?October 14, 2009
? ? ? ? ? ? ? ? ? ? ? ?Big Sky, MT
? ? ? ? ? ? ? ? ? ? ? ? ?(at SOSP)
? ? ? ? ? ? ? ?===============================

? ? ? ? ?FULL PAPER SUBMISSION: Monday, June 29th, 2009
? ? ? ? ?AUTHOR NOTIFICATION: Monday, July 27, 2009
? ? ? ? ?FINAL PAPERS DUE: Monday, September 14, 2009
--------------------------------------------------------------------------

System logs contain a wide variety of information about system status
and health,
including events from various applications, daemons and drivers, as
well as sampled
information such as resource utilization statistics. As such, these
logs represent a
rich source of information for the analysis and diagnosis of system problems and
prediction of future system events. However, their lack of
organization and the general
lack of semantic consistency between information from various software
and hardware
vendors means that most of this information content is wasted. Indeed, today's
most popular log analysis technique is to use regular expressions to
either detect
events of interest or to filter the log so that a human operator can
examine it manually.
Clearly, this captures only a fraction of the information available in
these logs and
does not scale to the large systems common in business and
supercomputing environments.

This workshop will focus on novel techniques for extracting operationally useful
information from existing logs and methods to improve the information
content of future
logs. Topics include but are not limited to:
? o Reports on publicly available sources of sample log data.
? o Log anonymization
? o Log feature detection and extraction
? o Prediction of malfunction or misuse based on log data
? o Statistical techniques to characterize log data
? o Applications of Natural-Language Processing (NLP) to logs
? o Scalable log compression
? o Log comparison techniques
? o Methods to enhance astandardize log semantics
? o System diagnostic techniques
? o Log visualization
? o Analysis of services (problem ticket) logs
? o Applications of log analysis to system administration

Papers limited to 6 2-column pages using >=10pt font.

Workshop Chair:
? Greg Bronevetsky (Lawrence Livermore National Laboratory)
? greg@bronevetsky.com

Program Committee:
? Jon Stearley, Sandia National Laboratory
? Bianca Schroeder, University of Toronto
? S?bastien Tricaud, INL
? Sapan Bhatia, Princeton University
? Risto Vaarandi, CCD CoE
? Jim Jansen, Penn State University
? Wei Xu, University of California, Berkeley
? Anton Chuvakin, Qualys
? Hugh Njemanze, ArcSight
? Kara Nance, University of Alaska, Fairbanks
? Raffael Marty, PixlCloud

--
Anton Chuvakin, Ph.D
http://www.chuvakin.org
http://chuvakin.blogspot.com
http://www.info-secure.org

------------------------------

_______________________________________________
firewall-wizards mailing list
firewall-wizards@listserv.icsalabs.com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards

End of firewall-wizards Digest, Vol 38, Issue 7
***********************************************